Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
File: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json)
Hash identifier: qExnMLfAZkqp/W+iJb5FUcR8ZvccrbPiZ7EUnhuntVA=
Subject key identifier: CC:D6:4E:B0:7F:56:A6:C1:CE:C2:73:C1:81:53:39:D1:88:7D:50:BC
Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
Certificate issuer: /CN=29da6411a13264dc6de0f101108540ef741ed19a
Certificate serial: 019A71B8D20D4756184357347A04D1E81378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
Manifest number: 133C
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: nRiRc+kkX1n6XIxis6EAk9kTSsVTXpButc14F3mXPzg=)
2: ofG1VLRjjYIcZfzAaNigWWgyFxw.roa (hash: ZHICR+Axb4b3KRXOcmZzuP26q8FUw656ivJ0mJFMsoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d2:0d:47:56:18:43:57:34:7a:04:d1:e8:13:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=ccd64eb07f56a6c1cec273c1815339d1887d50bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:b7:b6:2d:a0:d6:76:b4:76:c2:24:67:21:
1a:b6:47:17:ac:54:57:2a:72:84:1b:e0:ed:d0:45:
f4:8f:99:b4:e9:87:f6:a0:fb:88:9a:50:d1:d3:00:
10:d9:d0:96:aa:4a:f4:d8:27:d7:e7:c2:ea:98:2c:
da:29:3d:57:44:7d:02:2d:18:dd:37:22:1a:5c:da:
74:59:8a:92:00:4e:0d:dc:ee:07:be:36:72:ea:a8:
49:ba:5f:23:3a:50:65:67:05:f8:e7:c0:34:78:a3:
bf:cd:34:2d:10:ce:52:6a:06:4c:d8:a5:71:9f:62:
64:be:08:37:8d:af:0d:a5:58:8c:bf:20:f0:87:52:
e5:37:d7:f2:bb:3c:27:a8:68:6c:83:99:f0:2e:96:
c6:b5:56:1e:7f:99:31:c1:20:00:3c:4e:a5:87:78:
64:d2:d7:3f:03:78:55:c0:4b:5c:f7:89:ab:8d:99:
6a:23:a5:9d:e7:de:c6:fc:ae:5a:20:f7:ea:88:5a:
f7:08:a0:54:7c:7b:93:e9:9f:4d:0f:ec:43:59:cb:
f9:e2:79:3b:72:bc:6d:2b:33:aa:ee:a8:a4:ea:85:
78:7c:e0:99:a2:ca:9d:4f:80:19:ba:21:4e:1b:1a:
1f:b6:e1:99:31:bd:d6:a3:cb:f7:be:6a:79:c5:ff:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D6:4E:B0:7F:56:A6:C1:CE:C2:73:C1:81:53:39:D1:88:7D:50:BC
X509v3 Authority Key Identifier:
keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:63:e7:ca:b3:c1:3d:48:43:30:1e:24:93:6d:03:d4:dd:08:
ab:14:6b:36:14:ae:2d:46:20:26:68:20:9d:19:2b:ab:9e:c1:
b3:7d:12:f9:b1:35:d3:8c:96:f6:ed:d1:d6:1b:9e:1f:14:c8:
a1:47:95:ca:ba:7e:c8:f0:f9:51:a5:62:8d:b3:78:73:f0:4b:
78:27:11:d3:b9:40:7e:f6:7f:26:e2:74:76:f7:dc:6a:d0:12:
37:3d:c1:1a:03:3e:0a:5f:95:4c:27:ef:5b:fe:94:4c:67:10:
f6:ae:01:7a:fe:57:26:72:cf:17:52:9a:60:1d:49:af:a1:40:
27:23:d9:6e:f6:f3:2c:e5:57:b3:56:f1:96:01:4f:74:78:91:
55:c2:86:40:d7:92:5f:da:f9:cd:72:82:8d:ac:56:f9:9a:22:
15:83:ae:93:41:65:a9:3e:bc:5b:c4:46:c1:40:d8:a5:96:29:
a9:41:14:cc:e8:40:87:ef:4d:6c:cd:0d:63:cc:b4:5d:4d:1c:
89:07:69:76:99:2d:62:17:0d:d3:cd:4a:fb:d0:d0:e2:c9:b3:
a8:9c:e6:8d:e2:e9:3f:ec:94:f5:d9:9a:f3:b7:cd:ae:03:b9:
03:cd:b2:78:f9:9d:e6:f9:6e:97:39:22:87:4b:50:9a:6a:e6:
7a:06:bd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:54 2025 by rpki-client